CVE-2019-13628

State: Published
Severity: Not scored
Published: Oct 3, 2019
Updated: Aug 4, 2024
Reserved: Jul 17, 2019

Description

wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --enable-sp-math) contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about the nonces used and potentially mount a lattice attack to recover the private key used. The issue occurs because ecc.c scalar multiplication might leak the bit length.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://eprint.iacr.org/2011/232.pdf
https://tches.iacr.org/index.php/TCHES/article/view/7337
[oss-security] 20191002 Minerva: ECDSA key recovery from bit-length leakagemailing-list
https://minerva.crocs.fi.muni.cz/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.